├── .gitignore ├── .travis.yml ├── LICENSE.txt ├── README.md ├── scripts ├── __load__.zeek └── scan.zeek ├── testing ├── Baseline │ ├── tests.test_445_scan │ │ └── notice.log │ ├── tests.test_backscatter │ │ └── notice.log │ ├── tests.test_mutiport_scan │ │ └── notice.log │ ├── tests.test_port_scan │ │ └── notice.log │ └── tests.test_port_scan_with_zero_windows │ │ └── notice.log ├── btest.cfg ├── pcaps │ ├── 445_scan.pcap │ ├── backscatter.trace │ ├── multiport_scan.pcap │ ├── port_scan.pcap │ └── scan_with_zero_windows.pcap ├── random.seed └── tests │ ├── test_445_scan.zeek │ ├── test_backscatter.zeek │ ├── test_mutiport_scan.zeek │ ├── test_port_scan.zeek │ └── test_port_scan_with_zero_windows.zeek └── zkg.meta /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/.gitignore -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/.travis.yml -------------------------------------------------------------------------------- /LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/LICENSE.txt -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/README.md -------------------------------------------------------------------------------- /scripts/__load__.zeek: -------------------------------------------------------------------------------- 1 | @load ./scan 2 | -------------------------------------------------------------------------------- /scripts/scan.zeek: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/scripts/scan.zeek -------------------------------------------------------------------------------- /testing/Baseline/tests.test_445_scan/notice.log: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/Baseline/tests.test_445_scan/notice.log -------------------------------------------------------------------------------- /testing/Baseline/tests.test_backscatter/notice.log: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /testing/Baseline/tests.test_mutiport_scan/notice.log: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/Baseline/tests.test_mutiport_scan/notice.log -------------------------------------------------------------------------------- /testing/Baseline/tests.test_port_scan/notice.log: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/Baseline/tests.test_port_scan/notice.log -------------------------------------------------------------------------------- /testing/Baseline/tests.test_port_scan_with_zero_windows/notice.log: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/Baseline/tests.test_port_scan_with_zero_windows/notice.log -------------------------------------------------------------------------------- /testing/btest.cfg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/btest.cfg -------------------------------------------------------------------------------- /testing/pcaps/445_scan.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/pcaps/445_scan.pcap -------------------------------------------------------------------------------- /testing/pcaps/backscatter.trace: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/pcaps/backscatter.trace -------------------------------------------------------------------------------- /testing/pcaps/multiport_scan.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/pcaps/multiport_scan.pcap -------------------------------------------------------------------------------- /testing/pcaps/port_scan.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/pcaps/port_scan.pcap -------------------------------------------------------------------------------- /testing/pcaps/scan_with_zero_windows.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/pcaps/scan_with_zero_windows.pcap -------------------------------------------------------------------------------- /testing/random.seed: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/random.seed -------------------------------------------------------------------------------- /testing/tests/test_445_scan.zeek: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/tests/test_445_scan.zeek -------------------------------------------------------------------------------- /testing/tests/test_backscatter.zeek: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/tests/test_backscatter.zeek -------------------------------------------------------------------------------- /testing/tests/test_mutiport_scan.zeek: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/tests/test_mutiport_scan.zeek -------------------------------------------------------------------------------- /testing/tests/test_port_scan.zeek: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/tests/test_port_scan.zeek -------------------------------------------------------------------------------- /testing/tests/test_port_scan_with_zero_windows.zeek: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/testing/tests/test_port_scan_with_zero_windows.zeek -------------------------------------------------------------------------------- /zkg.meta: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ncsa/bro-simple-scan/HEAD/zkg.meta --------------------------------------------------------------------------------